Footprirvting a Target Network .p18

Lab 10

Extracting a Company’s Data Using Web Data Extractor

Web Data Extractor'is used to extract targeted companj(s) contact details or data such as emails; fax, phone through web for responsible b '2b communication.

Lab Scenario

Attackers continuously look tor the easiest method to collect information. There are many tools available with which attackers can extract a company’s database. Once they have access to the database, they can gather employees’ email addresses and phone numbers, the company’s internal URLs, etc. With the information gathered, they can send spam emails to the employees to till
their mailboxes, hack into the company’s website, and modify the internal URLs. They may also install malicious viruses to make the database inoperable. As an expert penetration tester, you should be able to dunk from an attacker’s perspective and try all possible ways to gather information 011 organizations. You should be able to collect all the confidential information of an organization and implement security features to prevent company data leakage. 111 tins lab, you will learn to use Web Data Extractor to extract a company’s data.

Lab Objectives

The objective ot tins lab is to demonstrate how to extract a company’s data using Web Data Extractor. Smdents will learn how to:

■ Extract Meta Tag, Email, Phone/Fax from the web pages

Lab Environment

To earn’ out the lab you need:

■ Web Data Extractor located at D:\CEH-Tools\CEHv8 Module 02 Footprinting and Reconnaissance\Additional Footprinting Tools\Web Data Extractor

■ You can also download the latest version ol Web Data Extractor from the link http://www.webextractor.com/download.htm

■ If you decide to download the latest version, then screenshots shown 111 the lab might differ

■ This lab will work in the CEH lab environment - 011 Windows Server
2012, Windows 8 י Windows Server 2008, and Windows 7

Lab Duration

Time: 10 Minutes

Overview of Web Data Extracting Web data extraction is a type of information retrieval diat can extract automatically unstructured or semi-stmctured web data sources 111 a structured manner.

Lab Tasks

1. To launch the Start menu, hover the mouse cursor in the lower-left corner of the desktop

FIGURE 10.1: Windows 8 — Desktop view

2. 111 the Start menu, click Web Data Extractor to launch the application Web Data Extractor

FIGURE 10.2: Windows 8—Apps

3. Web Data Extractor’s main window appears. Click New to start a new session

FIGURE 10.3: The Web Data Extractor main window

4. Clicking New opens the Session settings window.

5.Type a URL rwww.cert1hedhacker.com) 111 die Starting URL held. Select die check boxes for all the options as shown 111 die screenshot and click OK

FIGURE 10.4: Web Data Extractor die Session setting window

6. Click Start to initiate the data extraction

FIGURE 10.5: Web Data Extractor initiating the data extraction windows

7. Web Data Extractor will start collecting the information (emails, phones, faxes, etc.). Once the data extraction process is completed, an Information dialog box appears. Click OK

FIGURE 10.6: Web Data Extractor Data Extraction windows

8. The extracted information can be viewed by clicking the tabs

FIGURE 10.7: Web Data Extractor Data Extraction windows

9. Select the Meta tags tab to view the URL, Tide, Keywords, Description, Host, Domain, and Page size information

FIGURE 10.8: Web Data Extractor Extracted emails windows

10. Select Emails tab to view the Email, Name, URL, Title, Host, Keywords density, etc. information related to emails

FIGURE 10.9: Web Data Extractor Extracted Phone details window

11. Select the Phones tab to view the information related to phone like Phone number, Source, Tag, etc.

FIGURE 10.10: Web Data Extractor Extracted Phone details window

12. Similarly, check for the information under Faxes, Merged list, Urls (638), Inactive sites tabs

13. To save the session, go to File and click Save se ssion

FIGURE 10.11: Web Data Extractor Extracted Phone details window

14. Specify the session name in the Save se ssion dialog box and click OK

FIGURE 10.12: Web Data Extractor Extracted Phone details window

15. By default, the session will be saved at
                   D:\Users\admin\Documents\WebExtractor\Data

Lab Analysis

Document all die Meta Tags, Emails, and Phone/Fax.

Questions

1. What does Web Data Extractor do?

2. How would you resume an interrupted session 111 Web Data Extractor?

3. Can you collect all the contact details of an organization?